SECURE DOMAIN NAME RESOLUTION IN COMPUTER NETWORKS

摘要

Various techniques for improving privacy and security of domain name systems are disclosed herein. In one embodiment, a method includes transmitting, from a client device, a DNS query containing a domain name to a caching server for resolving the domain name. The domain name includes a first part having an encrypted request and a second part having an unencrypted network resource identifier. The method also includes receiving, at the client device, a DNS response from the caching server in response to the transmitted DNS query. The received DNS response containing an encrypted reply to the encrypted request in the first part of the domain name associated with the DNS query.